In these difficult times this paper is a very good read.

← Back to Blog

In these difficult times this paper is a very good read. Written by Chris Inglis and Harry Krejsa.

Cybersecurity needs a significant re-think in todays cyberspace. For a long time cybersecurity has focused on the ‘bang’ (the cyber-attack) and ‘what’s right of bang’. In general focusing on threat detection and response in the absence of an alternative strategy, cost constraints or regulation.

When the risk that we are trying to manage starts ‘left of bang’ and before the incident, where the risks are created and before they migrate across the enterprise or society. Waiting to address the risk and remediate a ransomware attack before it occurs is to late, as the insurance industry is finding.

‘With that backdrop, it should come as no surprise that many cyber policies proceed from a fundamentally negative framing that cedes the initiative to transgressors and places excessive faith in market incentives.‚ ‘ – Chris Inglis and Harry Krejsa

This is a very interesting article in accepting that cybersecurity and risk management has in part failed and that government has a significant role to play in cybersecurity and risk management. With businesses, individuals and local governments not being able to manage cybersecurity and risk on their own, and point solutions not providing the answer. Fixing the problem requires a collective approach likely involving legislation, regulation and investment by the public and private sectors. A partnership between government, the private sector and society to address cyber risk across the whole of society.

This paper is very timely given the recent developments between Ukraine and Russian and the potential impact that cyber presents. One hopes that recent events do not demonstrate the effect of cyber attacks, more than they already have.

Ted Dziekanowski

#theaugustaplan‚ #cybersecurity‚ #cyberriskmanagement‚ #regulatorycompliance‚ #regulatoryoversight‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #cyberriskgovernance‚ #ransomeware‚ #governance‚ #nist‚ #cyberinsurance‚ #insurance‚ #defence‚ #defense‚ #cni

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6902918702606745600

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags